Questions related to security of data on the Raspberry Pi. Also includes questions on using it in a security system (e.g. as a firewall).
Questions tagged [security]
180 questions
87
votes
6 answers
What should be done to secure Raspberry Pi?
Having tens of thousands of Raspberry Pi's connected to the internet is eventually going to capture the interest of some people who would like to do unsavory things to the little computers especially when many people are using their Pi to do network…
Dan B
- 2,907
- 2
- 21
- 20
66
votes
3 answers
How can I protect against intrusion and malware before connecting it to the internet (especially on a public IP address)?
With the large number of Raspberry Pis in the wild, and the fact that large groups of them are configured identically (when a newly-flashed SD card is installed with one of the few available images), they are likely to be a tempting target for…
finnw
- 5,790
- 3
- 34
- 42
60
votes
3 answers
Is the Raspberry Pi vulnerable to the Spectre or Meltdown exploit?
There are two new serious security flaws discovered, Spectre and Meltdown.
Is the Raspberry Pi vulnerable for Spectre and/or Meltdown?
Janghou
- 1,446
- 1
- 16
- 20
58
votes
5 answers
Using the Raspberry Pi as a router?
Has anyone used their Raspberry Pi as a routing device?
Mainly I want to use it to monitor my network, and it would be great if it had an input and output for Ethernet, but it doesn't, so I am wondering if it is very effective to monitor the network…
clifgray
- 721
- 2
- 7
- 8
31
votes
5 answers
How do I create a new user?
Are there any security implications for creating (or not creating) a new user?
If need be, how do I create a new user or change the default user?
Andrew Fogg
- 5,933
- 8
- 27
- 28
30
votes
2 answers
How do I encrypt my Raspberry?
The Raspberry is all well and nice and can run pretty quick. But how can I protect my SD card from offline data attacks. SSH can be protected with a good password or a SSH key but if somebody gets hold of the card I would like it to be encrypted in…
WillyWonka
- 547
- 1
- 5
- 13
29
votes
1 answer
How do I update OpenSSL on Raspbian
It seems like Raspbian has not been updated yet to deal with the Heartbleed bug. sudo apt-get update then sudo apt-get upgrade doesn't update anything (this is a system which was freshly updated yesterday so it is all up to date otherwise).
When I…
Jamie Bull
- 1,137
- 3
- 9
- 22
23
votes
3 answers
Is there a way to perform a full system encryption of Raspbian?
My Question is: I'd like to use my Raspbian encrypted, just like it is standard on Debian, Ubuntu or other Linux-Distros.
My Problem: Technically, you are not installing Raspbian on a Raspberry Pi or a SD-Card, instead you are copying a prepared…
Toralf Westström
- 393
- 1
- 3
- 9
15
votes
4 answers
Is the Raspberry Pi vulnerable to the KRACKs on WPA2 networks?
I have an updated RPI Zero W running Stretch.
The research is stating that wpa_supplicant is vulnerable on all Linux machines. According to Debian patches are rolled out:
For the oldstable distribution (jessie), these problems have been fixed
in…
Janghou
- 1,446
- 1
- 16
- 20
14
votes
1 answer
Raspberry Pi as a Linux firewall?
Can I use the Raspberry Pi as a Linux firewall?
Can anyone tell me the best way of doing this? Including network connection details and hardware I may need.
System Down
- 733
- 2
- 6
- 9
11
votes
2 answers
Entrusted Certificates installation
I have a very noob problem with my Raspberry Pi 3b (all updated to latest stable version available). I want to use it to automate some scripts I've written in R that run smoothly on my Win10 machine under R 3.4.3 within RStudio. As I move to the…
Ceschi
- 125
- 1
- 1
- 7
11
votes
1 answer
Self destruct: self erase all data on SD card using shred, dd or some other method
I will be using a Raspberry Pi as an air-gapped computer to make secure encrypted transactions on the Ethereum BlockChain.
Once in awhile I will want to update the software I am using which will mean taking the SD card out of the Pi and inserting…
John Shearing
- 271
- 3
- 12
11
votes
2 answers
Are there any issues changing default username in Raspbian or Raspbmc?
I know that security by obscurity is not real security, however, why make it easy by keeping a well known username such as "pi".
Therefore, what are the implications to changing the username of "pi" on Raspbian and Raspbmc?
Do I need to do anything…
HeatfanJohn
- 3,115
- 3
- 26
- 38
11
votes
8 answers
Copy Protection, Intellectual Protection and Deployment Issues
After a time with the Raspberry Pi 2 Model B v1.1., I have the following concerns:
I know it is focused to enhance vulnerable educational sectors, but is it possible to sell a product, based on the RPi? To make money with it? Become zillionaire…
Brethlosze
- 249
- 3
- 11
8
votes
3 answers
Disable ALL video outputs and USB Ports. Only remote access
I don't know if this is possible.
I'm hosting a web farm on raspberry pi (for fun).
And one of them is at friend's house. I can access the pi remotely using VNC.
How can i prevent my friend from accessing the PI like plugging it to a screen?
Marcel
- 183
- 1
- 5